Pcp: unsafe use of directories allows pcp to root privilege escalation

A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges. This disparity in privilege levels poses a risk when privileged root processes interact with directories or directory trees owned by unprivileged PCP users. Specifically, this vulnerability may lead to the compromise of PCP user isolation and facilitate local PCP-to-root exploits, particularly through symlink attacks. These vulnerabilities underscore the importance of maintaining robust privilege separation mechanisms within PCP to mitigate the potential for unauthorized privilege escalation.

ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action.

SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sensitive information.

Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a .avi file with certain large "indx truck size" and nEntriesInuse values, and a certain wLongsPerEntry value.

root privileges via buffer overflow in df command on SGI IRIX systems.

Local user gains root privileges via buffer overflow in rdist, via expstr() function.

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

root privileges via buffer overflow in ordist command on SGI IRIX systems.

root privileges via buffer overflow in login/scheme command on SGI IRIX systems.

root privileges via buffer overflow in xlock command on SGI IRIX systems.

Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.

Buffer overflow in suidperl (sperl), Perl 4.x and 5.x.

Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.

Delete or create a file via rpc.statd, due to invalid information.

Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.

webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.

root privileges via buffer overflow in eject command on SGI IRIX systems.

fsdump command in IRIX allows local users to obtain root access by modifying sensitive files.

Buffer overflow in xlock program allows local users to execute commands as root.